Portable Phpmyadmin Vulnerabilities

[en] WordPress Portable phpMyAdmin Plugin 1.4.1 has Multiple Security Bypass Vulnerabilities

Affected:

up to 1.4.1

Fixed in:

1.4.1

Disclosed:

Feb 18, 2020

CVE-2013-4454 on NVD →

[en] WordPress Portable phpMyAdmin Plugin has an authentication bypass vulnerability

Affected:

up to 1.5.0

Fix:

No patched version reported

Disclosed:

Jan 27, 2020

CVE-2013-4462 on NVD →

The Portable phpMyAdmin plugin before 1.3.0 for WordPress allows remote attackers to bypass authentication and obtain phpMyAdmin console access via a direct request to wp-content/plugins/portable-phpmyadmin/wp-pma-mod.

CVSS:

7.3

Affected:

up to 1.3.0

Fixed in:

1.3.1

Disclosed:

Aug 1, 2014

CVE-2012-5469 on NVD →

WordPress Portable phpMyAdmin Plugin 1.4.1 and below has Multiple Security Bypass Vulnerabilities including /pma/phpinfo.php information disclosure via direct request.

CVSS:

5.3

Affected:

up to 1.4.1

Fix:

No patched version reported

Disclosed:

Aug 1, 2014

CVE-2013-4454 on NVD →

WordPress Portable phpMyAdmin Plugin version 1.5.0 and below has an authentication bypass vulnerability.

CVSS:

9.1

Affected:

up to 1.5.0

Fix:

No patched version reported

Disclosed:

Oct 24, 2013

CVE-2013-4462 on NVD →

[en] The Portable phpMyAdmin plugin before 1.3.1 for WordPress allows remote attackers to bypass authentication and obtain phpMyAdmin console access via a direct request to wp-content/plugins/portable-phpmyadmin/wp-pma-mod.

Affected:

up to 1.3.1

Fixed in:

1.3.1

Disclosed:

Dec 20, 2012

CVE-2012-5469 on NVD →